Lucene search
+L

147 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•1 views

CVE-2025-13274: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in Campcodes School Fees Payment Management System 1.0. Affected by this issue is some unknown functionality of the file /ajax.php?action=deletefees. Executing a manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The...

8.8CVSS5.6AI score0.00308EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•2 views

CVE-2025-13286: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in itsourcecode Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=saveuser. Performing manipulation of the argument ID results in sql injection. Remote exploitation of the attack is possible. The exploit has been...

8.8CVSS5.6AI score0.00308EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•4 views

CVE-2025-13270: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes School Fees Payment Management System 1.0. This affects an unknown function of the file /ajax.php?action=savecourse. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been made public and could...

8.8CVSS5.5AI score0.00308EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•1 views

CVE-2025-13271: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Campcodes School Fees Payment Management System 1.0. This impacts an unknown function of the file /ajax.php?action=login. This manipulation of the argument Username causes sql injection. Remote exploitation of the attack is possible. The exploit has been publicly...

9.8CVSS5.6AI score0.00387EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/17 12:00 a.m.•2 views

CVE-2025-13269: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes School Fees Payment Management System 1.0. The impacted element is an unknown function of the file /ajax.php?action=savepayment. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit has been...

8.8CVSS5.5AI score0.00308EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/12 12:00 a.m.•2 views

CVE-2025-13057: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in Campcodes School Fees Payment Management System 1.0. Impacted is an unknown function of the file /ajax.php?action=savestudent. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and...

9.8CVSS5.6AI score0.00323EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/03 12:00 a.m.•1 views

CVE-2025-12612: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in Campcodes School Fees Payment Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=deletecourse. The manipulation of the argument ID results in sql injection. The attack can be executed remotely. The exploit has been...

9.8CVSS5.6AI score0.00346EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/22 12:00 a.m.•4 views

CVE-2025-10786: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This vulnerability affects unknown code of the file /ajax.php?action=deleteuser. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be us...

9.8CVSS5.6AI score0.00565EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/16 12:00 a.m.•1 views

CVE-2025-10564: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=deletecategory. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit has been...

9.8CVSS5.5AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/16 12:00 a.m.•0 views

CVE-2025-10565: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. Affected by this vulnerability is an unknown functionality of the file /ajax.php?action=deletereceiving. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/16 12:00 a.m.•2 views

CVE-2025-10563: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=savecategory. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the...

9.8CVSS5.5AI score0.00475EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/16 12:00 a.m.•0 views

CVE-2025-10562: Improper Neutralization of Special Elements used in an SQL Command

A flaw has been found in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file /ajax.php?action=saveproduct. This manipulation of the argument ID causes sql injection. Remote exploitation of the attack is possible. The exploit has been published and may be...

9.8CVSS5.5AI score0.00432EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/15 12:00 a.m.•1 views

CVE-2025-10417: Improper Neutralization of Special Elements used in an SQL Command

A security flaw has been discovered in Campcodes Grocery Sales and Inventory System 1.0. Affected is an unknown function of the file /ajax.php?action=deleteproduct. The manipulation of the argument ID results in sql injection. It is possible to launch the attack remotely. The exploit has been...

9.8CVSS5.6AI score0.00478EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/15 12:00 a.m.•1 views

CVE-2025-10416: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was identified in Campcodes Grocery Sales and Inventory System 1.0. This impacts an unknown function of the file /ajax.php?action=deletesupplier. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/14 12:00 a.m.•1 views

CVE-2025-10414: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was found in Campcodes Grocery Sales and Inventory System 1.0. The impacted element is an unknown function of the file /ajax.php?action=savecustomer. Performing manipulation of the argument ID results in sql injection. The attack is possible to be carried out remotely. The exploit...

9.8CVSS5.5AI score0.00415EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/14 12:00 a.m.•1 views

CVE-2025-10413: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in Campcodes Grocery Sales and Inventory System 1.0. The affected element is an unknown function of the file /ajax.php?action=deletecustomer. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been...

9.8CVSS5.5AI score0.00415EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/14 12:00 a.m.•1 views

CVE-2025-10415: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Campcodes Grocery Sales and Inventory System 1.0. This affects an unknown function of the file /ajax.php?action=savesupplier. Executing manipulation of the argument ID can lead to sql injection. The attack may be performed from remote. The exploit has been public...

9.8CVSS5.6AI score0.00415EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/08 12:00 a.m.•2 views

CVE-2025-10109: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability was determined in Campcodes Online Loan Management System 1.0. This issue affects some unknown processing of the file /ajax.php?action=deletepayment. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS5.6AI score0.00421EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/06 12:00 a.m.•2 views

CVE-2025-10030: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in Campcodes Grocery Sales and Inventory System 1.0. This issue affects some unknown processing of the file /ajax.php?action=savereceiving. Executing manipulation of the argument ID can lead to sql injection. The attack may be launched remotely. The exploit has been...

9.8CVSS5.6AI score0.00478EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/31 12:00 a.m.•2 views

CVE-2025-9744: Improper Neutralization of Special Elements used in an SQL Command

A weakness has been identified in Campcodes Online Loan Management System 1.0. The affected element is an unknown function of the file /ajax.php?action=login. Executing manipulation of the argument Username can lead to sql injection. The attack can be launched remotely. The exploit has been made...

9.8CVSS5.6AI score0.01791EPSS
SaveExploits3References1
Rows per page
Query Builder